Privacy Policy
Who is responsible for your information
Yiwen Huang, a sole trader trading as K&S Nail Brighton, is the data controller for the personal information we handle for the salon. You can write to us at 18 York Place, Brighton, BN1 4GU, United Kingdom, email [email protected], or contact us on WhatsApp (+44 7575 017588).
Visiting this website
Cloudflare Pages hosts and delivers this website. When you visit, Cloudflare receives technical request data such as your IP address, browser information and the page requested. Our legitimate interests are to deliver the website, keep it secure and investigate technical problems. The website serves its fonts from the same domain.
Lookbook and colour preferences
The website code sets no cookies and uses no session storage, analytics or advertising tags. When you save a Lookbook design, its reference number is stored in this browser so you can find it again. You can remove designs individually or clear your saved list in the Lookbook. Clearing site data or switching browsers or devices may mean you can no longer see your saved designs.
The site can remember a selected colour palette in this browser. Turn off saving to clear the palette and stop it being read or saved on future visits. The browser stores your choice to turn saving off so it can honour that choice. Use the clear button to reset the palette while keeping your current saving setting. These controls do not affect Lookbook favourites.
Bookings, messages and other websites
Treatwell and Fresha operate the booking pages and may give us details such as your name, contact details, chosen treatment and appointment time. When you contact us through WhatsApp or email, we receive the details you provide. A Lookbook enquiry can prefill a design name and reference number. You decide whether to send the message.
We use these details to respond to you, arrange appointments and provide treatments, either to take steps you request before a contract or to perform it. For general enquiries, service safety and resolving complaints or disputes, we use ordinary personal information where necessary for our legitimate interests. We also use records where necessary to comply with legal obligations. Access is limited to the owner and staff who need the information for their work. We do not use customer details for unauthorised private marketing.
Booking, messaging, social media and map links open separate services. This site has no booking form or payment checkout. Where a platform takes payment, it does so on its own service.
Health information you may share
Please keep health details and photos out of booking notes, email and WhatsApp. You can ask us for product information before deciding whether to proceed. We do not routinely ask for or keep allergy histories.
If limited allergy or previous reaction information is needed to assess whether a particular treatment can go ahead safely, we will first ask for your separate explicit consent under UK GDPR Articles 6(1)(a) and 9(2)(a). You can decline or withdraw consent in person or by emailing [email protected]. We use the information only for that assessment. We keep a separate record of your choice without recording the health details in it. We stop using the information if you withdraw consent and remove temporary health notes we control when the assessment ends or you withdraw, unless a separate lawful basis and special category condition justify retention.
If health details arrive unexpectedly, we limit access and avoid copying them into other records. We assess what we can remove from the records we control. Booking and messaging providers may separately control copies of messages or notes.
Retention and service providers
We keep records we control only while they are needed for the relevant purposes, subject to applicable law and our record-management arrangements. Booking platforms apply their own rules to records they control.
Some of our service providers describe processing or transfers outside the UK. Their notices explain their own retention practices and transfer arrangements where applicable. See Cloudflare, Treatwell, Fresha, WhatsApp and Google (Gmail).
Your rights
Contact us using the details above to ask for access or correction, or where applicable to request deletion, restriction or portability, or to object to processing. You can also complain to the Information Commissioner's Office.